let
  aya-higan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIChKU9RA6o3idRk15yBwD7RJZDJvKldInwDgSJSQEb+u";
  aya-makai = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAcqyCiBlsu5LZ+Gdf00hbHaBLYV9IcgWDO+cDtifIWW";
  aya-yama = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBO+syWCXTaOxpR1Hu1AycSPZC/oelm6SV8rt6FjGCEz";

  higan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIbdkpKyC9ksfz8eKHZSaj3S6SxAhXmOSV3ydc5Y44do";
  makai = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC7lIKAYzS3KWP4s+jXzPfBu91P2gtvVyk+cXWxAa542";
  yama = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPvjuL+HhDwgogjbbPlMBJlWnYNzYh8ltWvSL0t5871q";
  blackberry = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMV1GJfxni0UNksBuVAzRI8FtfcWE23dvkC9MjC74cd6";
in {
  # DNS
  "duckdns.age".publicKeys = [ aya-yama yama ];
  "dynv6.age".publicKeys = [ aya-yama yama ];
  "regru.age".publicKeys = [ aya-yama yama ];
  "regru-fail2banana.age".publicKeys = [ aya-yama blackberry ];

  # nix-serve keys
  "nix.badbayan.duckdns.org-1.age".publicKeys = [ aya-yama yama ];
  "nix.notbad.dynv6.net-1.age".publicKeys = [ aya-yama yama ];
  "nix.bad.net.ru-1.age".publicKeys = [ aya-yama yama ];

  # Services
  "miniflux.age".publicKeys = [ aya-yama yama ];
  "nextcloud.age".publicKeys = [ aya-yama yama ];
  "yggdrasil.age".publicKeys = [ aya-yama yama ];
  "coturn-fail2banana.age".publicKeys = [ aya-yama blackberry ];
  "nextcloud-fail2banana.age".publicKeys = [ aya-yama blackberry ];
  "synapse-fail2banana.age".publicKeys = [ aya-yama blackberry ];

  # WireGuard host keys
  "higan-wg0.age".publicKeys = [ aya-yama aya-higan higan ];
  "makai-wg0.age".publicKeys = [ aya-yama aya-makai makai ];
  "yama-wg0.age".publicKeys = [ aya-yama yama ];
  "blackberry-wg0.age".publicKeys = [ aya-yama blackberry ];

  # WireGuard preshared keys
  "yama-wg0-higan.age".publicKeys = [ aya-yama aya-higan yama higan ];
  "yama-wg0-makai.age".publicKeys = [ aya-yama aya-makai yama makai ];
  "yama-wg0-oneplus.age".publicKeys = [ aya-yama yama ];
  "yama-wg0-blackberry.age".publicKeys = [ aya-yama yama blackberry ];
}
